Block downstream policy

The Block downstream policy prevents updates from downstream registries (i.e. disallows push/publish to a registry with this policy enabled). A registry with the policy enabled can still pull new package versions upstreams.

Use cases

• Cache/firewall type registries - Registries that (only) manage incoming packages where users want to block packages from downstream registries.